Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-NODE-2022-32222
HistoryMar 06, 2024 - 11:03 a.m.

BIT-node-2022-32222

2024-03-0611:03:38
Google
osv.dev
6
cryptographic
vulnerability
node.js
linux
openssl
accessible
non-admin user
upgrade

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

25.1%

JSON

A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of /etc/ssl as was the case in versions prior to the upgrade to OpenSSL 3.

CPENameOperatorVersion
nodelt18.5.0
nodege18.0.0

Related

debiancve 1
hackerone 3
cvelist 1
prion 1
alpinelinux 1
osv 1
veracode 1
redhatcve 1
ubuntucve 1
cve 1
ibm 10
mageia 1
nessus 5
openvas 1
freebsd 1
nodejsblog 2
ics 1
gentoo 1
oracle 2
debiancve
debiancve
CVE-2022-32222
2022-07-14 15:15:00
hackerone
hackerone
Node.js: Node 18 reads openssl.cnf from /home/iojs/build/... upon startup on MacOS
2022-09-08 19:43:15
Node.js: Node 18 reads openssl.cnf from /home/iojs/build/... upon startup.
2022-07-03 04:17:48
Internet Bug Bounty: Inadequate Encryption Strength in nodejs-current reads openssl.cnf from /home/iojs/build/... upon startup on MacOS
2023-02-28 04:49:13
cvelist
cvelist
CVE-2022-32222
2022-07-14 00:00:00
prion
prion
Design/Logic Flaw
2022-07-14 15:15:00
alpinelinux
alpinelinux
CVE-2022-32222
2022-07-14 15:15:00
osv
osv
CVE-2022-32222
2022-07-14 15:15:08
veracode
veracode
Insecure Cryptography
2022-07-15 12:11:39
redhatcve
redhatcve
CVE-2022-32222
2022-07-08 19:17:55
ubuntucve
ubuntucve
CVE-2022-32222
2022-07-14 00:00:00
cve
cve
CVE-2022-32222
2022-07-14 15:15:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Event Streams
2022-09-30 14:07:36
Security Bulletin: IBM Cognos Dashboards on IBM Cloud Pak for Data has addressed security vulnerabilities (CVE-2022-32212, CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32222, CVE-2023-26136)
2023-09-01 14:38:22
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities
2022-08-10 16:27:58
mageia
mageia
Updated nodejs packages fix security vulnerability
2022-08-26 00:21:07
nessus
nessus
Node.js 14.x < 14.20.1 / 16.x < 16.17.1 / 18.x < 18.9.1 Multiple Vulnerabilities (September 23rd 2022 Security Releases).
2022-10-03 00:00:00
FreeBSD : Node.js -- July 7th 2022 Security Releases (b9210706-feb0-11ec-81fa-1c697a616631)
2022-07-08 00:00:00
Node.js 14.x < 14.20.0 / 16.x < 16.16.0 / 18.x < 18.5.0 Multiple Vulnerabilities (July 7th 2022 Security Releases).
2022-10-03 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0294)
2022-08-26 00:00:00
freebsd
freebsd
Node.js -- July 7th 2022 Security Releases
2022-07-05 00:00:00
nodejsblog
nodejsblog
September 23rd 2022 Security Releases
2022-09-15 00:00:00
July 7th 2022 Security Releases
2022-07-07 00:00:00
ics
ics
Siemens SINEC INS
2023-01-17 12:00:00
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

25.1%

JSON
Related for OSV:BIT-NODE-2022-32222
debiancve1hackerone3cvelist1prion1alpinelinux1osv1veracode1redhatcve1ubuntucve1cve1ibm10mageia1nessus5openvas1freebsd1nodejsblog2ics1gentoo1oracle2